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generation input and producing a second CW based, at least in part, on both of the following the first CW and the second CW 
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DYNAMICALLY SHIFTING CONTROL WORD 

FIELD OF THE INVENTION 
5 The present invention relates to conditional access in general, and in 

particular to conditional access systems for use in data broadcasting and related data 
applications. 

BACKGROUND OF THE INVENTION 

10 Systems for scrambling a television data stream are well-known in the 

art. One such system is described in the following US Patents: 5,282,249 to Cohen 
et al.; 5,481,609 to Cohen et al. Scrambled television data streams described in the 
Cohen et al patents comprise both scrambled data representing television signals and 
coded control messages, also known as ECMs. The ECMs of Cohen et al comprise, 

15 in a coded form, data necessary for generating a control word (CW) which may be 
used to descramble the scrambled data representing television signals. An ECM is 
also termed a control word packet or CWP. 

Data necessary for generating a control word is known in the prior art 
to take many different forms and may include, in general, at least any of the 

20 following: a control word; an encrypted control word packet which is intended to be 
decrypted before use; and a seed to a generating function such as, for example, a 
one-way function which generates the control word upon input of the seed. 
Throughout the present specification and claims the terms "control word generating 
information" and "CW generating information 55 are used interchangeably to 

25 designate data necessary for generating a control word in any appropriate form, as 
described above. 

While the two patents to Cohen et al describe an analog system, that 
is 5 a system in which analog television data streams are, broadcast to television sets, 
it is appreciated that similar ECM methods may also be used for digital television 
30 data streams. Generally, the scrambling techniques used for scrambling analog 
television signals such as, for example, the well-known "cut-and-rotate 55 technique, 
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are chosen for their applicability to analog signals. In scrambling of digital 
television signals other scrambling techniques, well-known in the art, are used, the 
techniques being more appropriate to digital signals such as, for example, applying 
the well-known DES algorithm to the digital television signals. 
5 Methods of transmitting a scrambled digital signal, including ECMs, 

are described in the MPEG-2 standard, ISO/IEC 13818-6, 12 July 1996 and 
subsequent editions. 

The system of Cohen et al and other systems described in the art share 
a feature of broadcasting an ECM synchronous to, generally immediately before or 
10 in a data stream parallel to, the actual scrambled broadcast. Typically, such an ECM 
is valid for a brief duration, with a new ECM being broadcast, in synchrony with a 
scrambled broadcast scrambled according to a new key, a few seconds, such as 10 
seconds, after the broadcast of the previous ECM. Some systems have been 
described in which a key is sent, whether by broadcasting or by other means such as 
15 by mail, with a lower frequency, even as low as once a month. Such a system is 
described, for example, in US Patent 4,484,027 and Re 33,189 to Lee et al. 

Patents describing systems related to encrypted broadcasting and/or 
key distribution in encrypted broadcasting systems include the following: 

US Patent 4,228,321 to Flanagan describes a privacy transmission 
20 system with remote key control, in which key control signals are produced at the 
unscrambling location and are both used for unscrambling at that location and also 
transmitted to a scrambling location for use in scrambling. 

US Patent 4,531,020 to Wechselberger et al describes a method for 
controlling the simultaneous broadcast of enciphered digital information signals, for 
25 example in a radio or television broadcast environment, to a plurality of subscribers 
using several levels of enciphering keys. 

US Patent 4,531,021 to Bluestein et al describes enciphering digital 
information for transmission using a first key, common to all receivers, and a second 
key specific to one receiver of a small group of receivers. 
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US Patent 4,864,615 to Bennett et al describes a system for 
reproduction of secure keys by using distributed key generation data and a 
distributed encrypted prekey. 

US Patent 4,866,770 to Seth-Smith et al describes a system for 
5 distributing video, audio, teletext, and data, in which system wide, individual 
decoder and group decoder control signals are transmitted as part of a composite 
signal. The group decoder control signal includes information relating to a group of 
decoders, while the individual decoder control signal includes information relating 
to the operation of individual decoders. 
10 US Patent 4,944,006 to Citta et al describes a secure data packet 

transmission system utilizing a global encryption key as well as address keys for 
encrypting individually addressed bit packets. 

US Patent 5,301,247 to Rasmussen et al describes a method for 
ensuring secure communications, in which two keys are combined together to 
1 5 produce a session key. 

US Patent 5,499,298 to Narasimhalu et al describes a method for 
controlled dissemination of digital information, in which encrypted digital 
information is decrypted by a tamper-proof controlled information access device. 
Access to said tamper-proof controlled information access device is provided 
20 according to conditions specified by an information provider. 

In general, methods of transmitting a scrambled digital signal, 
including ECMs, are well known. Some systems use a composite signal, that is, an 
analog or digital signal including a plurality of components. Typically the plurality 
of components includes both a scrambled television signal component and an ECM 
25 component, the ECM component comprising a plurality of ECMs. Prior art 
references which discuss examples of this type of signal include the following: 
DVB ETR289, "Digital Video Broadcasting (DVB): Support for use of scrambling 
and conditional access (CA) within digital broadcasting systems"; and DVB 
SIM061, "Technical specification of DVB-Simulcrypt", 1 April 1997. 
30 Other documents relating to broadcasting of digital information 

include the DVB Specification for Data Broadcasting, document SI-DAT 360 (TM 
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1779), 12 February 1997; and ATSC Digital Television Standard, document A54, 
October 1995 and subsequent editions. 

Other methods of transmitting a scrambled digital signal, particularly 
useful in a case where the signal includes sub-signals encoded according to various 
5 different methods, are described in "Common Interface Specification for Conditional 
Access and other Digital Video Broadcasting Decoder Applications", DVB 
document AO 17, May 1996 and subsequent editions; and in "Common Interface 
Specification for Conditional Access and other Digital Video Broadcasting Decoder 
Applications", CENELEC EN50221:1997. 

10 European Patent Application EP 0 375 539 to Guillon et al describes a 

process which includes access messages when emitting composite video signals, 
unscrambling the resulting signals using a smart card reader, whereby the smart card 
comprises encoded digital data, and utilizing an interactive process for the 
identification of a digital signature. 

15 European Patent Application EP 0 461 029 to Jouet et al describes a 

transcontroller device that is intended for an installation conforming to a 
MAC/PACKET standard. 

PCT Patent Application WO 99/45711 to Sered et al describes a key 
delivery method for use in an encoded communications system in which at least one 

20 encoded item including a first item encoded with a first item control word is sent in 
a communication stream from a sender to a receiver. The method described includes 
transmitting an item entitlement control message (IECM) comprising item control 
information, transmitting a stream entitlement control message (SECM) comprising 
stream control information, and combining at least part of the item control 

25 information and at least part of the stream control information to produce the first 
item control word. 

US Patent 6,178,242 to Tsuria describes a digital recording protection 
system using ECMs. 

The disclosure of US Provisional Patent Application 60/206,056, from 

30 which the present application claims priority, is hereby incorporated herein by 
reference. 
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GB Patent 2 326 004 to Bauminger et al describes a viewer response 
method for use with an interactive telecommunications system. The method 
includes accumulating a user interaction history of a user of the system. The user 
interaction history includes user interaction information associated with a plurality 
5 of user interaction events; and provides user-sensible feedback, based at least in part 
on the user interaction history. 

The disclosures of all references mentioned above and throughout the 
present specification are hereby incorporated herein by reference. 

MPEG-4, the most recent edition of the MPEG standard, enables the 
10 broadcaster to manipulate video objects independently of each other. The MPEG-4 
standard does not address the issue of conditional access at the level of objects. 
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SUMMARY OF THE INVENTION 
The present invention seeks to provide an improved conditional 
access system and particularly a conditional access system useful for controlling a 
plurality of objects. 

5 The term "digital data stream," as used throughout the present 

specification and claims, refers in a broad sense to any stream of digital data 
transmitted continuously at least during a particular period of time, and particularly 
includes broadcast digital data such as broadcast digital television signals. 

The term "scrambling" in all of its forms, as used throughout the 
10 present specification and claims, refers to any appropriate method of scrambling, 
encoding, or encrypting data, many such methods being well-known in the art. 

The term "display" in all of its forms, as used throughout the present 
specification and claims, is not limited to visual presentation, but includes making 
palpable to the senses or producing any appropriate sensible representation. 
15 Applying principles known in the prior art, it would be 

straightforward to deliver one ECM, to generate one CW, per object. 

In a preferred embodiment, the present invention seeks to provide 
apparatus and methods for generating more than one CW from a single ECM. 

Preferably, in the present invention, one or more appropriate 
20 transformations are provided for producing a first CW and subsequent CWs from a 
single ECM. 

It is appreciated that each individual CW may control one object or 
may control a so-called "mega-object" which is comprised of a plurality of objects. 

There is thus provided in accordance with a preferred embodiment of 

25 the present invention a method for generating a plurality of control words, each 
control word controlling access to an object, the method including providing a 
control word packet (CWP), generating a first control word (CW) from the CWP, 
providing a second C W generation input, and producing a second CW based, at least 
in part, on both of the following: the first CW and the second CW generation input. 

30 Further in accordance with a preferred embodiment of the present 

invention each control word controls access to a plurality of objects. 
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Still further in accordance with a preferred embodiment of the present 
invention the method also includes utilizing the first CW to control access to a first 
object, and utilizing the second CW to control access to a second object. 

Additionally in accordance with a preferred embodiment of the 
5 present invention the method also includes providing a third CW generation input, 
and producing a third CW based, at least in part, on both of the following: the 
second CW and the third CW generation input. 

Moreover in accordance with a preferred embodiment of the present 
invention the third CW generation input includes a user input. 
10 Further in accordance with a preferred embodiment of the present 

invention the third CW generation input includes a user characteristic input 
associated with a user. 

Still further in accordance with a preferred embodiment of the present 
invention the user characteristic input includes at least one of the following: an 
15 indication of a geographic region associated with the user, an indication of urban / 
rural dwelling associated with the user, an indication of a preference associated with 
the user, an indication of an age category associated with the user, an indication of 
an age associated with the user, an indication of a gender associated with the user, 
and an indication of an ethnic identity associated with the user. 
20 Additionally in accordance with a preferred embodiment of the 

present invention the method also includes receiving a data stream wherein the first 
object and the second object are included in the data stream. 

Moreover in accordance with a preferred embodiment of the present 
invention the data stream includes a broadcast data stream. 
25 Further in accordance with a preferred embodiment of the present 

invention the data stream includes an MPEG data stream. 

Further in accordance with a preferred embodiment of the present 
invention the MPEG data stream includes an MPEG-4 data stream. 

Still further in accordance with a preferred embodiment of the present 
30 invention the first object and the second object includes a display object. 
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Additionally in accordance with a preferred embodiment of the 
present invention the display object includes a visual display object. 

Moreover in accordance with a preferred embodiment of the present 
invention each of the first object and the second object includes an accumulative 
5 display object. 

Further in accordance with a preferred embodiment of the present 
invention each of the first object and the second object includes an exclusive display 
object. 

There is also provided in accordance with another preferred 

10 embodiment of the present invention a method for generating a second control word 
from a first control word, the first control word controlling access to a first object 
and the second control word controlling access to a second object, the method 
including providing a first control word (CW) 5 providing a second CW generation 
input, and producing a second CW based, at least in part, on both of the following: 

15 the first CW and the second CW generation input. 

Further in accordance with a preferred embodiment of the present 
invention each control word controls access to a plurality of objects. 

Still further in accordance with a preferred embodiment of the present 
invention the second CW generation input includes a user input. 

20 Additionally in accordance with a preferred embodiment of the 

present invention the second CW generation input includes a user characteristic 
input associated with a user. 

Moreover in accordance with a preferred embodiment of the present 
invention the user characteristic input includes at least one of the following: an 

25 indication of a geographic region associated with the user, an indication of urban / 
rural dwelling associated with the user, an indication of a preference associated with 
the user, an indication of an age category associated with the user, an indication of 
an age associated with the user, an indication of a gender associated with the user, 
and an indication of an ethnic identity associated with the user. 

30 Further in accordance with a preferred embodiment of the present 

invention the first object and the second object are included in the data stream. 
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Still further in accordance with a preferred embodiment of the present 
invention the data stream includes a broadcast data stream. 

Additionally in accordance with a preferred embodiment of the 
present invention the data stream includes an MPEG data stream. 
5 Moreover in accordance with a preferred embodiment of the present 

invention the MPEG data stream includes an MPEG-4 data stream. 

Further in accordance with a preferred embodiment of the present 
invention each of the first object and the second object includes a display object. 

Still further in accordance with a preferred embodiment of the present 
10 invention the display object includes a visual display object. 

Additionally in accordance with a preferred embodiment of the 
present invention each of the first object and the second object includes an 
accumulative display object. 

Moreover in accordance with a preferred embodiment of the present 
15 invention each of the first object and the second object includes an exclusive display 
object. 

There is also provided in accordance with another preferred 
embodiment of the present invention, a method for generating a plurality of control 
words, each control word controlling access to an object, the method including 

20 providing a control word packet (CWP), generating a first control word (CW) from 
the CWP, providing a second CW generation input, producing a second CW based, 
at least in part, on both of the following: the first CW and the second CW 
generation input, utilizing the first CW to control access to a first object, utilizing 
the second CW to control access to a second object, providing a third CW 

25 generation input, producing a third CW based, at least in part, on both of the 
following: the second CW and the third CW generation input, and utilizing the third 
CW to control access to a third object. 

Further in accordance with a preferred embodiment of the present 
invention each control word controls access to a plurality of objects. 

30 There is also provided in accordance with another preferred 

embodiment of the present invention, a method for generating a plurality of control 
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words, each control word controlling access to an object, the method including 
providing a first control word (CW), providing a second CW generation input, 
producing a second CW based, at least in part, on both of the following: the first 
CW and the second CW generation input, utilizing the first CW to control access to 
5 a first object, utilizing the second CW to control access to a second object, providing 
a third CW generation input, producing a third CW based, at least in part, on both of 
the following: the second CW and the third CW generation input, and utilizing the 
third CW to control access to a third object. 

Further in accordance with a preferred embodiment of the present 
1 0 invention each control word controls access to a plurality of objects. 

Still further in accordance with a preferred embodiment of the present 
invention at least one of the second CW generation input and the third CW 
generation input includes a user input. 

Additionally in accordance with a preferred embodiment of the 
15 present invention the method also includes displaying at least the second object and 
the third object. 

Moreover in accordance with a preferred embodiment of the present 
invention the displaying includes displaying the first object. 

Further in accordance with a preferred embodiment of the present 
20 invention the method also includes providing an event associated with the first 
object, the second object, and the third object, and determining a price for the event. 

Still further in accordance with a preferred embodiment of the present 
invention the price is based, at least in part, on at least one of the second CW 
generation input and the third CW generation input. 
25 There is also provided in accordance with another preferred 

embodiment of the present invention a method for generating a plurality of control 
words, each control word controlling access to an object, the plurality of control 
words including a first control word and at least one additional control word, the 
method including providing a first control word (CW), setting a variable V equal to 
30 the first CW, for each additional CW to be generated, performing the following 
steps: providing an additional CW generation input, producing an additional CW 
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based, at least in part, on both of the following: V 5 and the additional CW 
generation input, and setting the variable V equal to the additional control word. 

Further in accordance with a preferred embodiment of the present 
invention each control word controls access to a plurality of objects. 
5 Still further in accordance with a preferred embodiment of the present 

invention the providing a first CW includes providing a control word packet (CWP), 
generating the first CW from the CWP. 

There is also provided in accordance with another preferred 
embodiment of the present invention a method for generating a plurality of control 
10 words, each control word controlling access to an object, the plurality of control 
words including a first control word and at least one additional control word, the 
method including providing a first control word (CW), for each additional CW to be 
generated, performing the following: steps providing an additional CW generation 
input, and producing an additional CW based, at least in part, on both of the 
15 following: the first CW, and the additional CW generation input. 

Further in accordance with a preferred embodiment of the present 
invention each control word controls access to a plurality of objects. 

Still further in accordance with a preferred embodiment of the present 
invention the providing a first CW includes providing a control word packet (CWP), 
20 and generating a first control word (CW) from the CWP. 

Additionally in accordance with a preferred embodiment of the 
present invention each object includes a scrambled object, and each CW includes a 
key for descrambling the scrambled object associated therewith. 

Moreover in accordance with a preferred embodiment of the present 
25 invention each control word controls access to a plurality of objects. 

There is also provided in accordance with another preferred 
embodiment of the present invention, a method for providing a multiple-question 
game in a data broadcast environment, the method including providing a first 
scrambled question, providing a first control word (CW) including descrambling 
30 information for descrambling the first question, receiving, from a user, a first answer 
to the first question, and producing a second CW based, at least in part, on both of 

11 
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the following: the first CW and the first answer, the second CW including 
descrambling information for descrambling a second question. 

Further in accordance with a preferred embodiment of the present 
invention at least one of the first question and the second question includes a 
5 plurality of questions. 

There is also provided in accordance with another preferred 
embodiment of the present invention, control word generating apparatus for 
generating a plurality of control words, each control word controlling access to an 
object, the control word generating apparatus including a control word generator for 
10 generating a first control word (CW) from a control word packet (CWP), and a 
control word processor for producing a second CW based, at least in part, on both of 
the following: the first CW and a second CW generation input. 

Further in accordance with a preferred embodiment of the present 
invention the apparatus includes a security subsystem, which includes at least one of 
1 5 the following: the control word generator, and the control word processor. 

Still further in accordance with a preferred embodiment of the present 
invention the security subsystem includes a removable security element, which 
includes at least one of the following: the control word generator, and the control 
word processor. 

20 There is also provided in accordance with another preferred 

embodiment of the present invention, control word generating apparatus for 
generating a second control word from a first control word, the first control word 
controlling access to a first object and the second control word controlling access to 
a second object, the control word generating apparatus including a control word 

25 processor for producing a second CW based, at least in part, on both of the 
following: a first CW and a second CW generation input. 

There is also provided in accordance with another preferred 
embodiment of the present invention, control word generating apparatus for 
generating a plurality of control words, each control word controlling access to an 

30 object, the control word generating apparatus including a control word generator for 
generating a first control word (CW) from a control word packet (CWP), a control 
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word processor for producing a second CW based, at least in part, on both of the 
following: the first CW and a second CW generation input, and an object access 
controller for utilizing the first CW to control access to a first object and the second 
CW to control access to a second object, wherein the control word processor is 
5 operative to produce a third CW based, at least in part, on both of the following: the 
second CW and a third CW generation input, and the object access controller is 
operative to utilize the third CW to control access to a third object. 

Further in accordance with a preferred embodiment of the present 
invention the apparatus includes a security subsystem, which includes at least one of 

10 the following: the control word generator, the control word processor, and the 
object access controller. 

Still further in accordance with a preferred embodiment of the present 
invention the security subsystem includes a removable security element, which 
includes at least one of the following: the control word generator, the control word 

15 processor, and the object access controller. 

There is also provided in accordance with another preferred 
embodiment of the present invention control word generating apparatus for 
generating a plurality of control words, each control word controlling access to an 
object, the control word generating apparatus including a control word processor for 

20 producing a second CW based, at least in part, on both of the following: a first CW 
and a second CW generation input, and an object access controller for utilizing the 
first CW to control access to a first object and the second CW to control access to a 
second object, wherein the control word processor is operative to produce a third 
C W based, at least in part, on both of the following: the second CW and a third CW 

25 generation input, and the object access controller is operative to utilize the third CW 
to control access to a third object. 

Further in accordance with a preferred embodiment of the present 
invention the apparatus also includes a security subsystem, which includes at least 
one of the following: the control word processor, and the object access controller. 

30 Still further in accordance with a preferred embodiment of the present 

invention the security subsystem includes a removable security element, which 
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includes at least one of the following: the control word processor, and the object 
access controller. 

There is also provided in accordance with another preferred 
embodiment of the present invention, control word generating apparatus for 
5 generating a plurality of control words, each control word controlling access to an 
object, the plurality of control words including a first control word and at least one 
additional control word, the control word generating apparatus including a control 
word processor receiving a first control word (CW) as input and operative to set a 
variable V equal to the first CW, for each additional CW to be generated receive an 

10 additional CW generation input, produce an additional CW based, at least in part, on 
both of the following: V, and the additional CW generation input, and set the 
variable V equal to the additional control word. 

There is also provided in accordance with another preferred 
embodiment of the present invention, control word generating apparatus for 

15 generating a plurality of control words, each control word controlling access to an 
object, the plurality of control words including a first control word and at least one 
additional control word, the control word generating apparatus including a control 
word processor receiving the first control word (CW) and operative, for each 
additional CW to be generated, to receive an additional CW generation input, and 

20 produce an additional CW based, at least in part, on both of the following: the first 
C W, and the additional CW generation input. 

Further in accordance with a preferred embodiment of the present 
invention the apparatus also includes a security subsystem, which includes the 
control word processor. 

25 Still further in accordance with a preferred embodiment of the present 

invention the security subsystem includes a removable security element, which 
includes the control word processor. 

There is also provided in accordance with another preferred 
embodiment of the present invention, game apparatus for providing a 

30 multiple- question game in a data broadcast environment, the apparatus including a 
scrambled question descrambler receiving a first scrambled question and a first 

14 
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control word (CW) including descrambling information for descrambling the first 
question and operative to descramble the first question, and a control word processor 
receiving, from a user, a first answer to the first question and operative to produce a 
second CW based, at least in part, on both of the following: the first CW and the 
first answer, the second CW including descrambling information for descrambling a 
second question. 

Further in accordance with a preferred embodiment of the present 
invention the apparatus also includes a security subsystem, which includes at least 
one of the following: the scrambled question descrambler, and the control word 
processor. 

Still further in accordance with a preferred embodiment of the present 
invention the security subsystem includes a removable security element, which 
includes at least one of the following: the scrambled question descrambler, and the 
control word processor. 

Additionally in accordance with a preferred embodiment of the 
present invention the removable security element includes a smart card. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
The present invention will be understood and appreciated more fully 
from the following detailed description, taken in conjunction with the drawings in 
which: 

5 Fig. 1A is a simplified partly pictorial, partly block diagram 

illustration of a control word generating system constructed and operative in 
accordance with a preferred embodiment of the present invention; 

Fig. IB is a simplified pictorial illustration of a control device, useful 
in understanding the operation of the system of Fig. 1A; 
10 Fig. 1C is a simplified partly pictorial, partly block diagram 

illustration of the system of Fig. 1A, useful in understanding the operation thereof; 

Fig. ID is a simplified pictorial illustration of the control device of 
Fig. IB, useful in understanding Fig. 1C; 

Fig. IE is a simplified partly pictorial, partly block diagram 
15 illustration of the system of Fig. 1A, useful in understanding the operation thereof; 

Fig. IF is a simplified pictorial illustration of the control device of 
Fig. IB, useful in understanding Fig. IE; 

Fig. 2A is a simplified partly pictorial, partly block diagram 
illustration of a control word generating system constructed and operative in 
20 accordance with an alternative preferred embodiment of the present invention; 

Fig. 2B is a simplified pictorial illustration of a control device, useful 
in understanding the operation of the system of Fig. 2 A; 

Fig. 2C is a simplified partly pictorial, partly block diagram 
illustration of the system of Fig. 2A, useful in understanding the operation thereof; 
25 Fig. 3A is a simplified partly pictorial, partly block diagram 

illustration of a control word generating system constructed and operative in 
accordance with another preferred embodiment of the present invention; 

Fig. 3B is a simplified pictorial illustration of a control device, useful 
in understanding the operation of the system of Fig. 3 A; 
30 Fig. 3C is a simplified partly pictorial, partly block diagram 

illustration of the system of Fig. 3 A, useful in understanding the operation thereof; 
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Fig. 3D is a simplified pictorial illustration of the control device of 
Fig. 3B, useful in understanding Fig. 3C; 

Fig. 3E is a simplified partly pictorial, partly block diagram 
illustration of the system of Fig. 3 A, useful in understanding the operation thereof; 

Fig. 3F is a simplified pictorial illustration of the control device of 
Fig. 3B, useful in understanding Fig. 3E; 

Fig. 4A is a simplified partly pictorial, partly block diagram 
illustration of a control word generating system constructed and operative in 
accordance with a further preferred embodiment of the present invention; 

Fig. 4B is a simplified pictorial illustration of a control device, useful 
in understanding the operation of the system of Fig. 4A; 

Fig. 4C is a simplified partly pictorial, partly block diagram 
illustration of the system of Fig. 4A, useful in understanding the operation thereof; 

Fig. 5 is a simplified flowchart illustration of a preferred method of 
operation of the systems of Figs. 1A - IF, 2A - 2C, 3 A - 3F, and 4A - 4C; 

Fig. 6 is a simplified flowchart illustration of an alternative preferred 
method of operation of the systems of Figs. 1A - IF, 2A - 2C, 3 A - 3F, and 4A - 4C; 

Fig. 7 is a simplified flowchart illustration of a further alternative 
preferred method of operation of the systems of Figs. 1A - IF and 3 A - 3F; 

Fig. 8 is a simplified flowchart illustration of a still further alternative 
preferred method of operation of the systems of Figs. 1A - IF and 3 A - 3F; 

Fig. 9 is a simplified flowchart illustration of another alternative 
preferred method of operation of the systems of Figs. 1A - IF and 2A - 2C; 

Fig. 10 is a simplified flowchart illustration of a further alternative 
preferred method of operation of the systems of Figs. 3 A - 3F and 4A - 4C; and 

Fig. 11 is a simplified flowchart illustration of another alternative 
preferred method of operation of the systems of Figs. 1A - IF and 3 A - 3F. 
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DETAILED DESCRIPTION OF A PREFERRED EMBODIMENT 

In the drawings of the present application, similar reference numbers 
are used to refer to similar elements. For the sake of brevity and clarity of 
description, repeated description of similar elements is generally omitted. 
5 Reference is now made to Fig. 1A which is a simplified partly 

pictorial, partly block diagram illustration of a control word generating system 
constructed and operative in accordance with a preferred embodiment of the present 
invention. 

The system of Fig. 1A, generally designated 100 5 preferably 
10 comprises the following components, each of which may be implemented in a 
suitable combination of hardware and software, as is well known in the art: 

1. Control word packet and control word (CWP/CW) processing 
apparatus 110, preferably operative to receive a CWP 120 and to produce therefrom, 
as described in detail below, a plurality of control words (CWs). A first control 

15 word (CW1) 130 is shown in Fig. 1A by way of example only. 

2. Scrambled object unscrambling apparatus 140, preferably 
operative to receive a control word (CW), such as the CW1 130 and a scrambled 
object such as a first scrambled object (SOI) 150, and to produce therefrom a first 
unscrambled object (UOl) 160. Preferably, scrambled object unscrambling 

20 apparatus 140 uses appropriate mechanisms well known in the art to produce the 

UOl 160 from the SOI 150 and the CW1 130. 

For example, and without limiting the generality of the foregoing, in a 

system using DES as a scrambling method, the SOI 150 preferably comprises an 

object scrambled using DES, the CW1 130 comprises a DES key for unscrambling 
25 the SOI 150, and the UOl 160 comprises the result of descrambling the SOI 150 

using the DES descrambling method well known in the art and the DES key 

comprised in the CW1 130. 

It is appreciated that many possible appropriate scrambling systems 

are known in the art, and that a person reasonably skilled in the art would be able to 
30 adapt the present invention for use with any appropriate scrambling system. 
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A datastream of scrambled objects 165 comprising a plurality of 
scrambled objects including SOI 150 is preferably input into scrambled object 
unscrambling apparatus 140 

3. Unscrambled object display apparatus 170, which may comprise 
5 any appropriate apparatus for making the UOl 160 visible or otherwise sensible to 

one or more human senses. For purposes of simplicity of illustration and without 
limiting the generality of the foregoing, unscrambled object display apparatus 170 is 
shown in Fig. 1A as a television set which, as is well known in the art, typically 
comprises apparatus for making unscrambled input visible and audible. 
10 Unscrambled object display apparatus 170 will be referred to herein as television 
(TV) 170 or display 170, it being appreciated that any other appropriate type of 
unscrambled object display apparatus may alternatively or additionally be used. 

4. The system of Fig. 1A also preferably comprises a set top box 
(STB) 175, which may comprise any appropriate set top box or integrated receiver / 

15 decoder (IRD), as is well known in the art, suitably programmed to provide a user 
interface as described herein. It is appreciated that: the STB 175 may or may not 
include a removable security element such as a smart card (not shown); and the 
functionality of the STB 175 may alternatively be included within the TV 170, in 
which case the STB 175 may be omitted. 

20 As is well known in the art, the STB 175 is preferably operatively 

associated with the TV 170 and is preferably operative to receive and, where 
appropriate, decode television transmissions. 

Preferably, as is also well known in the art, the STB 175 is equipped 
with a return path or other ability to communicate with a broadcaster, a broadcaster 

25 headend, or another appropriate location (not shown). 

It is well known in the art that various types of return path are 
available, and that an appropriate return path should be chosen. For example, in the 
case of a cable broadcast, where the STB 175 is appropriate for receiving cable 
broadcasting, the return path may comprise a cable return path. In the case of a 

30 satellite broadcast, where the STB 175 is appropriate for receiving satellite 
broadcasting, the return path may comprise a telephone return path, also known as a 
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"telephone link". It is appreciated that other technologies for implementing a return 
path, including but not limited to VSAT satellite return path technology, are known, 
and that any appropriate return path may be used. 

Preferably, but not necessarily, CWP/CW processing apparatus 110 
5 and scrambled object unscrambling apparatus 140 are comprised in the STB 175 or 
in a removable security element, such as a smart card, operatively associated 
therewith; those elements are shown separately in the drawings of the present 
application for purposes of simplicity and clarity of description. 

One example of a system comprising a set top box with removable 

10 security element is described in US Patent 6,178,242 to Tsuria, the description of 
which is hereby incorporated herein by reference. 

The operation of the system of Fig. 1A is now briefly described. The 
control word packet 120 is processed by CWP/CW processing apparatus 110 to 
generate the CW1 130. 

15 Control words, such as the CW1 130, are input into scrambled object 

unscrambling apparatus 140 and are used to unscramble corresponding scrambled 
objects from the datastream of scrambled objects 165. Within the scrambled object 
unscrambling apparatus 140, the CW1 130 is used to unscramble the SOI 150 to 
produce the UOl 160 for display on the TV 170 as a display object 1 (DOl) 180. 

20 It is appreciated that the UOl 160 is in the form of data, preferably 

digital data; the UOl 160 is shown in Fig. 1A displayed on the TV 170 as the DOl 
180. 

The source of the datastream of scrambled objects 165 including the 
SOI 150 could be a broadcast, a DVD disk, a VCR tape, a floppy disk, an attached 
25 hard drive, a magnetic tape, or any other appropriate source (none of which are 
shown) as is well known in the art. 

Control words are generated, preferably by a smart card (not shown) 
which is associated with the STB 175. Logical values which are input via the user, 
the datastream 165, a user profile or any other means as is well known in the art may 
30 preferably be stored in a memory of the smart card. 

20 



WO 01/91466 



PCT/IL01/00434 



In the case where there is user input, the user presses on a control 
device, such as a control device 190 (Fig. IB). The STB 175 registers that the user 
pressed a certain value and then the STB passes the certain value to the smart card. 
The smart card preferably stores the certain value that was passed to the smart card 
5 in the smart card's memory. 

Smart card memory can be non-volatile, retaining data when not 
connected to an external power supply, or volatile, not retaining data when not 
connected to an external power supply. Non- volatile memory sources known in the 
art include EEPROM, EPROM, flash memory, ROM, and battery backed RAM. 
1 0 Volatile memory sources known in the art include RAM and data registers. 

In the present invention, the smart card preferably takes the value 
entered by the user from the smart card's memory and uses that value as an input to 
generate the next control word. 

Reference is now additionally made to Fig. IB, which is a simplified 
1 5 pictorial illustration of a control device, useful in understanding the operation of the 
system of Fig. 1A. 

A user preferably interacts with the system 100 in Fig. 1A. Thus, the 
user, via a control device 190, interacts with the STB 175 by responding to output 
displayed on the TV 170 via the control device 190. User interfaces of this general 
20 type are well known in the art. 

It is appreciated that many types of appropriate user interface are well 
known, and that the depiction of the control device 190 in Fig. IB is not meant to be 
limiting. 

The control device 190 may comprise any appropriate control device 
25 suitable for use with the STB 175; for example, if the STB 175 is adapted to receive 
infrared control signals of a certain type, the remote control 190 is preferably 
adapted to produce signals of that type. The control device preferably includes a 
plurality of controls 200. 

The user, in the example of Fig. 1A, sees the DOl 180 which includes 
30 a question. In Fig. IB, the user uses the control device 190 by selecting at least one 
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of the plurality of controls 200 to respond to the question which is displayed on the 
TV 170. 

In Fig. IB, by way of example, the user inputs the correct answer to 
the question posed in the D01 180 by entering "1" via the control device 190. 
5 The example of Figs. 1 A and IB is a user interaction interface; it is 

appreciated that the present invention is not limited to user interaction and can be 
based on other input including input supplied from a prestored user profile, which 
can be permanently associated with a particular user or which can be established at 
the beginning of each session. 
10 For example, and without intending to limit the generality of the 

foregoing, a prestored user profile may include information regarding region, 
ethnicity, an urban/rural dwelling indicator, user preferences, age, age category, and 
gender. 

For example and without intending to limit the generality of the 
15 foregoing, user information may be used to change the appearance of objects on the 
TV 170. A "vehicle" object can be either a car or a truck depending on an 
"urban/rural" region indicator. The "person" object driving the vehicle can be 
Jewish, Italian, Polish, Hispanic, Asian, African American etc. depending on the 
"ethnic" indicator. The "sky" object can be sunny or snowy depending on the 
20 "climate" indicator. 

Reference is now additionally made to Fig. 1C which is a simplified 
partly pictorial, partly block diagram illustration of the system of Fig. 1A, useful in 
understanding the operation thereof. 

Fig. 1C shows use of the user's correct response, input in Fig. IB, to 
25 dynamically generate a second control word (CW2) 230 and reveal an additional 
object on the display. 

In Fig. 1C, the CW1 130 and a first input (II) 210 are processed by 
CWP/CW processing apparatus 110 to generate a second control word (CW2) 230. 
CWP/CW processing apparatus 110 preferably generates the CW2 230 through 
30 appropriate mathematical manipulation of its inputs, comprising the CW1 130 and 
the II 210. 
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Any appropriate mathematical manipulation or operation can be 
applied to the inputs or to values derived from the inputs. 

For example, and without limiting the generality of the foregoing: 
appropriate mathematical operations include XOR, OR, AND, NOT, NAND, NOR, 
5 and XNOR. 

For example, and without limiting the generality of the foregoing: if 
the II 210 is a one-byte value and the CW1 130 is an 8-byte value, the II 210 can be 
applied via any appropriate mathematical operation to any byte of the CW1 130 to 
generate a value that can be used to derive the CW2 230 through further appropriate 
1 0 mathematical manipulation. 

Alternatively an 8-byte value derived from the II 210 can be 
generated by duplicating the value of the II in 8-bytes to create an 8-byte value 
derived from the II 210. The 8-byte value derived from the II 210 can then be used 
in a mathematical operation with the CW1 130 to generate the CW2 230. 
15 Further alternatively the II 210 and the CW1 130 can be used to 

initialize a one-way function to generate the CW2 230. 

Still further alternatively the II 210 and the CW1 130 can be used as 
inputs to a one-way function to generate the CW2 230. 

Alternatively shifting the CW1 130 by a value derived from the II 
20 210 can be used to generate the CW2 230. 

Individual bytes or individual bits of the CW1 130 can be shifted by a 
value derived from the II 210 or by the value of the II 210 itself. Shifting in which 
shifted bits wrap around and fill bits vacated by shifting may be used. Shifting in 
which empty spaces created by shifting are consistently filled with "0"s or 
25 consistently filled with "l"s may be used. Shifting may be done to the right or to the 
left of the value the CW1 130. 

Further alternatively shifting the II 210 by a value derived from the 
CW1 130 can be used to generate the CW2 230. 

The mathematical operations discussed above are by way of example 
30 only and are not meant to be limiting. 
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CW1 130 and CW2 230 are used by way of example only in the 
above discussion. Control word generation for all subsequent control words may 
preferably be generated in a similar manner. 

A method which iteratively offsets each successive control word by a 
5 value derived from the most recent user input can be used to generate the next 
control word in sequence. Such a method for generating successive control words is 
illustrated in Figs. 1 A - IF, as described herein. 

An alternative method iteratively offsets a variable equal to CW1 by a 
value derived from the most recent user input to generate the next control word in 
10 sequence. 

Within scrambled object unscrambling apparatus 140, the CW2 230 is 
used to unscramble a second scrambled object (S02) 240 to produce a second 
unscrambled object (U02) 250. It is appreciated that the U02 250 is in the form of 
data and is displayed, preferably as a discrete object, on the TV 170 as a second 
15 display object (D02) 260. DOl 180 and D02 260 are preferably simultaneously 
displayed on the TV 170. 

Reference is now additionally made to Fig. ID, which is a simplified 
pictorial illustration of the control device 190 of Fig. IB, useful in understanding 
Fig. 1C. 

20 In Fig. 1C, the D02 260 includes a question which solicits user input. 

The user preferably interacts with the control device 190 in Fig. ID by pressing at 
least one control from the plurality of controls 200 to enter a response to the 
question posed by the D02 260. 

In Fig. ID, by way of example, the user inputs the correct answer to 
25 the question posed in the D02 260, by entering "2" via the control device 190. 

Reference is now additionally made to Fig. IE which is a simplified 
partly pictorial, partly block diagram illustration of the system of Fig. 1A, useful in 
understanding the operation thereof. 

Fig. IE shows use of the user's correct response, input in Fig. ID, to 
30 dynamically generate a third control word (CW3) 270 which reveals an additional 
object on the display 170. 
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In Fig. IE, the CW2 230 and a second input (12) 265 are processed by 
CWP/CW processing apparatus 110 to generate the third control word (CW3) 270. 
Within the scrambled object unscrambling apparatus 140, the CW3 270 is used to 
unscramble a third scrambled object (S03) 290 to produce a third unscrambled 
5 object (U03) 300. It is appreciated that the U03 300 is in the form of data and is 
then displayed, preferably as a discrete object, on the TV 170 as a third display 
object (D03) 310. The DOl 180, the D02 260, and the D03 310 are preferably 
simultaneously displayed on the TV 170. 

Reference is now additionally made to Fig. IF, which is a simplified 
10 pictorial illustration of the control device 190 of Fig. IB, useful in understanding 
Fig. IE. 

In Fig. IE, the D03 310 includes a question which solicits user input. 
The user preferably interacts with the control device 190 in Fig. IF by pressing at 
least one control from the plurality of controls 200 to enter a correct response to the 
1 5 question posed by the DOS 3 1 0. 

In Fig. IF, by way of example, the user inputs the correct answer to 
the question posed in the D03 310, by entering "1" via the control device 190. 

The correct input can be used in combination with the CW3 270 to 
generate a fourth control word (not shown) in the same manner that the CW2 230 
20 and the CW3 270 were generated. The process for generating control words from 
one CWP 120 as described in Figs. 1A - IF is iterative and can continue until the 
application is completed, assuming that all of the responses that the user enters are 
correct. It is also appreciated, in accordance with the above description that iterative 
the CW 130 generation can occur a minimum of twice, once to generate the CW1 
25 130 and once to generate the CW2 230. 

Reference is now made to Fig. 2A which is a simplified partly 
pictorial, partly block diagram illustration of a control word generating system 
constructed and operative in accordance with an alternative preferred embodiment of 
the present invention. 

30 The operation of the system of Fig. 2 A is now briefly described. The 

control word packet 120 is processed by the CWP/CW processing apparatus 110 to 
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generate the CW1 130. Within the scrambled object unscrambling apparatus 140, 
the CW1 130 is used to unscramble the SOI 150 to produce the UOl 160 for display 
on the TV 170 as the DOl 180. 

It is appreciated that the UOl 160 is in the form of data, preferably 
5 digital data; the UOl 160 is shown in Fig. 2A displayed on the TV 170 as the DOl 
180. 

Reference is now additionally made to Fig. 2B, which is a simplified 
pictorial illustration of the control device 190 of Fig. IB, useful in understanding the 
operation of the system of Fig. 2A. A user preferably interacts with the system 100 
10 and thus with the TV 170 via the control device 190. 

In Fig. 2A, the user sees the DOl 180 which includes a question. 

In Fig. 2B 5 the user uses the control device 190 by selecting at least 
one of the plurality of controls 200 to incorrectly respond to the question which is 
displayed on the TV 170. 
1 5 The example of Figs 2 A and 2B is a user interaction interface; it is 

appreciated that the present invention is not limited to user interaction and can be 
based on other input including unsuitable or non-matching input supplied from a 
prestored user profile, as described above, which can be permanently associated with 
a particular user or which can be established at the beginning of each session. 
20 Reference is now made to Fig. 2C which is a simplified partly 

pictorial, partly block diagram illustration of the system of Fig. 2A, useful in 
understanding the operation thereof. 

Fig. 2C shows how the user's incorrect response, a third input (13) 
320, is used to generate an erroneous CW 330. The erroneous CW 330 is a CW 
25 which indicates to the system that unsuitable or non-matching input has been 
received. The erroneous CW 330 does not unscramble the next scrambled object in 
sequence. The erroneous CW 330 preferably causes an error message to be 
generated. 

When the user enters a value, an explicit status is preferably returned 
30 to the software element that indicates whether the user entered a correct or incorrect 
response. For example, a method can be built into a smart card which indicates that 
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the response input by the user is valid. Such methods are well known in the art and 
include digital signatures and checksums. When the explicit status registers an 
incorrect status, the erroneous CW 330 is generated. 

Generating CW1 330 when the explicit status registers an incorrect 
status is by way of example only. When an incorrect status is registered in the 
explicit status, an error message can be generated in any other acceptable manner 
including the software breaking the generation of control words without an 
erroneous CW 330. 

The eiToneous CW 330 cannot be used to unscramble the S02 240 
and an error message 340 is generated instead. The error message 340 is displayed 
on the TV 170 as a display error 350. DOl 180 and the display error 350 are 
preferably simultaneously displayed on the TV 170. 

The user is unable to proceed in the displayed interactive application 
because the previous control word is needed to generate the next control word in 
sequence. 

It is further appreciated that, in embodiments where inputs are not 
interactively provided by a user, an incorrect input may halt subsequent control 
word generation, or may not halt subsequent word generation. An incorrect input 
and resultant generation of the erroneous CW 330 is preferably noted and acted 
upon in the conditional access system in some manner such as sending an error 
message back to the broadcaster or printing out an error message on the TV 170. 

Reference is now made to Fig. 3A, which is a simplified partly 
pictorial partly block diagram illustration of a control word generating system 
constructed and operative in accordance with another preferred embodiment of the 
present invention. 

The operation of the system of Fig. 3 A is now briefly described. The 
control word packet 120 is processed by CWP/CW processing apparatus 110 to 
generate the CW1 130. Within the scrambled object unscrambling apparatus 140, 
the CW1 130 is used to unscramble the SOI 150 to produce the UOl 160 for display 
on the TV 170 as the DOl 180. 
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It is appreciated that the UOl 160 is in the form of data, preferably 
digital data; the UOl 160 is shown in Fig. 3A displayed on the TV 170 as the DOl 
180. 

By way of example, the DOl 180 is shown as occupying part of the 
5 screen. The DOl 180 could also occupy the entire screen. By way of example, 
DOl 180 is illustrated as a stationary display object. The DOl 180 could also be a 
dynamic video object which moves across the screen. The DOl 180 could also have 
associated audio or subtitle information. 

Reference is now additionally made to Fig. 3B, which is a simplified 
10 pictorial illustration of a control device, useful in understanding the operation of the 
system of Fig. 3 A. A user preferably interacts with the system 100 and thus with the 
TV 170 via the control device 190. 

In Fig. 3 A, the user sees the DOl 180 which includes a question. In 
Fig. 3B, the user uses the control device 190 by selecting at least one of the plurality 
1 5 of controls 200 to respond to the question which is displayed on the TV 1 70. 

The example of Figs. 3 A and 3B is a user interaction interface; it is 
appreciated that the present invention is not limited to user interaction and can be 
based on other input including input supplied from a prestored user profile, as 
described above, which can be permanently associated with a particular user or 
20 which can be established at the beginning of each session. 

The operation of the embodiment of the invention, as described by 
Figs. 3 A - 3F, outputs display objects on the TV 170 one at a time. Each display 
object is exclusively displayed on the TV 170, as opposed to being displayed 
accumulatively, where all display objects are simultaneously displayed. 
25 The operation of the system of Fig. 3 A is now briefly described. 

In Fig. 3 A, the DOl 180 is exclusively displayed on the TV 170. 
In Fig. 3B, the user inputs the correct answer to the question posed in 
the DOl 180 by entering "l"via the control device 190. 

Reference is now made to Fig. 3C which is a simplified partly 
30 pictorial, partly block diagram illustration of the system of Fig. 3 A, useful in 
understanding the operation thereof. 
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Fig. 3C shows use of the user's correct response, input in Fig. 3B, to 
dynamically generate the CW2 23 0, produce the U02 25 0, and display the D02 260 
instead of the DOl 180 on the TV 170. The D02 260 is exclusively displayed. 

In Fig. 3C, the CW1 130 and a fourth input (14) 355 are processed by 
5 a CWP/CW processing apparatus 110 to generate the second control word (CW2) 
230. CWP/CW processing apparatus 110 preferably generates CW2 230 through 
mathematical manipulation of its inputs, the CW1 130 and the 14 355. 

Possible means of accomplishing said manipulation is described 
above with reference to Fig. 1C. 
10 Reference is now additionally made to Fig. 3D, which is a simplified 

pictorial illustration of the control device 190 of Fig. 3B, useful in understanding 
Fig. 3C. A user preferably interacts with the system 100 and thus with the TV 170 
via the control device 190. 

In Fig. 3D, by way of example, the user inputs the correct answer to 
15 the question posed in the D02 260, by entering "2" via the control device 190. 

Reference is now additionally made to Fig. 3E which is a simplified 
partly pictorial, partly block diagram illustration of the system of Fig. 3 A, useful in 
understanding the operation thereof. 

Fig. 3E shows use of the user's correct response, input in Fig. 3D, to 
20 dynamically generate the CW3 270, produce the UQ3 300, and display the D03 310 
instead of the D02 260 on the TV 170. The D03 3 10 is exclusively displayed. 

In Fig. 3E, the CW1 130 and a fifth input (15) 360 are processed by 
CWP/CW processing apparatus 110 to generate the CW3 270. Within scrambled 
object unscrambling apparatus 140, the CW3 270 is used to unscramble the SOS 290 
25 to produce the U03 300. It is appreciated that the U03 300 is in the form of data 
and is then displayed, preferably as a discrete object, on the TV 170 as the D03 310. 

Reference is now additionally made to Fig. 3F, which is a simplified 
pictorial illustration of the control device 190 of Fig. 3B, useful in understanding 
Fig. 3E. 

30 In Fig. 3E, the DOS 310 includes a question which solicits user input. 

The user preferably interacts with the control device 190 in Fig. 3F by pressing at 
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least one control from the plurality of controls 200 to enter a correct response to the 
question posed by the DOS 310. 

In Fig. 3F, by way of example, the user inputs the correct response to 
the question posed in the D03 3 10, by entering "1" via the control device 190. 
5 This correct input can be used in combination with CW1 to generate a 

fourth control word (not shown) in the same manner that CW2 and CW3 were 
generated. The process for generating control words from one CWP 120 as shown 
in Figs. 3A - 3F is iterative and can continue until the application is completed, 
assuming that all of the responses that the user enters are correct. It is also 
10 appreciated, in accordance with the above description that iterative CW generation 
can occur a minimum of twice. 

The system of Figs. 3A - 3F preferably operates on the same 
principles as that of Figs. 1A - IF with two exceptions: 

1. In Figs. 3 A - 3F, each display object is exclusively displayed on 
15 the TV 170. Each successive display object is displayed on the TV 170 instead of 

the display object which had previously been displayed. In Figs. 1 A - IF all display 
objects are accumulatively displayed. 

2. In Figs. 3A - 3F, successive control word generation utilizes the 
CW1 130 as one of the inputs thereto. In Figs. 1A - IF successive control word 

20 generation utilizes the latest generated control word as one of its inputs; for 
example, the CW2 230 is used as one of the inputs to generate CW3 270. 

It is appreciated that the exclusive display of objects on the TV 170 
and successive control word generation from a constant input, the CW1 130, are 
shown together by way of example only and can be implemented separately. 

25 Reference is now made to Fig. 4A which is a simplified partly 

pictorial, partly block diagram illustration of a control word generating system 
constructed and operative in accordance with an alternative preferred embodiment of 
the present invention. 

Reference is now additionally made to Fig. 4B which is a simplified 

30 pictorial illustration of a control device, useful in understanding the operation of the 
system of Fig. 4 A. 
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Reference is now additionally made to Fig. 4C which is a simplified 
partly pictorial, partly block diagram illustration of the system of Fig. 4A, useful in 
understanding the operation thereof. 

Figs. 4A - 4C depict preferable operation of the system of Fig. 3A 
5 when the user inputs an incorrect response. 

In Fig. 4 A, the user sees the D01 180 which includes a question. 

In Fig. 4B, the user uses the control device 190 by selecting at least 
one of the plurality of controls 200 to incorrectly respond to the question which is 
displayed on the TV 170. 
10 Fig. 4C shows use of the user's incorrect response, a sixth input (16) 

380, to generate the erroneous CW 330. The erroneous CW 330 cannot unscramble 
the S02 240 and the error message 340 is generated instead. The error message 340 
is exclusively displayed on the TV 170 as the display error 350. Display error 350 is 
displayed instead of DOl 180 on the TV 170. 
15 Figs. 4A - 4C operate on the same principles as Figs. 2A - 2C with the 

exception that each display object is exclusively displayed on the TV 170. In Figs. 
4A - 4C, each successive display object is output on the TV 170 instead of the 
display object which had previously been displayed. In Figs. 2A - 2C, by contrast, 
all descrambled objects are accumulatively displayed. 
20 It is further appreciated that in Figs. 4A - 4C, the user being unable to 

proceed in the displayed interactive application is by way of example only. It is 
appreciated that the user may enter an incorrect response and the application may 
continue. Because successive control word generation is based on CW1 130, all 
subsequent keywords can be generated, even when the previous control word was 
25 not generated. Even in the case where the first input is incorrect, CW1 can come 
from internal processing and subsequent control words can be generated. 

Preferably, the user can continue even when an incorrect value is 

entered. 

In Fig. 4C, the display error 350 is exclusively displayed on the TV 
30 170. The D03 310, which was previously displayed, no longer appears on the 
screen. 
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It is appreciated that the present invention, in the preferred 
embodiments as described above, may be used to implement a wide variety of 
applications, preferably including entertainment applications. 

For example, and without limiting the generality of the foregoing: in 
5 a sports application, objects, representing elements of a sports event to be shown on 
a TV screen, might be revealed one at a time in response to correct user inputs. It is 
further appreciated that a price or a prize might be associated with such an 
application; for example, and without limiting the generality of the foregoing, a user 
who answered all questions correctly might be excused from payment, or a user who 
10 answered less than a predetermined minimum of questions correctly might be 
required to make a higher than normal payment. 

It is appreciated that in the present invention, in the preferred 
embodiments as described above, in place of a control word packet, a first control 
word can be a first input to the CWP/CW processing apparatus which begins the 
15 iterative generation of subsequent control words. 

In another non-limiting example of an application which might be 
implemented using the preferred embodiments described above, a first CW derived 
from a CWP might be used to enable display of, for example, a movie or a portion 
thereof. Second and subsequent CWs, produced as described above, might be used 
20 for an interactive application, including, for example, one or more screen overlays, 
associated with the movie. 

It is appreciated that, in various preferred embodiments, the present 
invention, which preferably utilizes one CWP to generate many CWs for controlling 
objects, may save an ample amount of bandwidth when compared to a prior art 
25 system which would require one CWP for each CW. 

Reference is now made to Fig. 5, which is a simplified flowchart 
illustration of a preferred method of operation of the systems of Figs. 1A - IF, 2A - 
2C, 3 A - 3F, and 4A - 4C. The method of Fig. 5 is self-explanatory with reference 
to the above description of Figs. 1A - IF, 2A - 2C, 3A - 3F, and 4A - 4C. 
30 Reference is now made to Fig. 6, which is a simplified flowchart 

illustration of a preferred method of operation of the systems of Figs. 1A - IF, 2A - 
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2C, 3 A - 3F, and 4A - 4C. The method of Fig. 6 is self-explanatory with reference 
to the above description of Figs. 1A - IF, 2A - 2C, 3 A - 3F, and 4A - 4C. 

Reference is now made to Fig. 7, which is a simplified flowchart 
illustration of a preferred method of operation of the systems of Figs. 1A - IF and 
5 3A - 3F. The method of Fig. 7 is self-explanatory with reference to the above 
description of Figs. 1A - IF and 3 A - 3F. 

Reference is now made to Fig. 8, which is a simplified flowchart 
illustration of a preferred method of operation of the systems of Figs. 1 A - IF and 
3A - 3F. The method of Fig. 8 is self-explanatory with reference to the above 
10 description of Figs. 1A - IF and 3 A - 3F. 

Reference is now made to Fig. 9, which is a simplified flowchart 
illustration of a preferred method of operation of the systems of Figs. 1A - IF and 
2A - 2C. The method of Fig. 9 is self-explanatory with reference to the above 
description of Figs. 1 A - IF and 2A - 2C. 
15 Reference is now made to Fig. 10, which is a simplified flowchart 

illustration of a preferred method of operation of the systems of Figs. 3A - 3F and 
4A - 4C. The method of Fig. 10 is self-explanatory with reference to the above 
description of Figs. 3 A - 3F and 4A - 4C. 

Reference is now made to Fig. 11, which is a simplified flowchart 
20 illustration of a preferred method of operation of the systems of Figs. 1 A - IF and 
3A - 3F. The method of Fig. 1 1 is self-explanatory with reference to the above 
description of Figs. 1 A - IF and 3 A - 3F. 

It is appreciated that, in typical CA systems known in the art, the CW 
changes according to a predetermined schedule in which there is one CW for every 
25 "key period". It is known in the art, for example, to have a 10 second key period 
and to transmit a plurality of CWPs, each CWP being associated with the same CW, 
during the key period; often, each CWP transmitted during a given key period is 
identical to each other CWP transmitted during that key period. 

It is therefore appreciated that, in some preferred embodiments of the 
30 present invention, there may be a different CWP for each key period. In such 
preferred embodiments, correct inputs that were used to generate objects during a 
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first key period are preferably saved in the smart card's memory. These saved 
values may then be used, in a second key period, together with the new CWP, as 
explained above, to generate a corresponding sequence of CWs, which are then used 
to regenerate the previously displayed objects. 
5 It is appreciated that various features of the invention which are, for 

clarity, described in the contexts of separate embodiments may also be provided in 
combination in a single embodiment. Conversely, various features of the invention 
which are, for brevity, described in the context of a single embodiment may also be 
provided separately or in any suitable subcombination. For example exclusive 
10 display of objects on the TV 170 can be implemented independently of successive 
control word generation using the CW1 130 as one of its inputs as discussed in Figs. 
3A - 3F. 

It will be appreciated by persons skilled in the art that the present 
invention is not limited by what has been particularly shown and described 
15 hereinabove. Rather the scope of the invention is defined only by the claims which 
follow: 
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What is claimed is: 

CLAIMS 

1. A method for generating a plurality of control words, each control 
5 word controlling access to an object, the method comprising: 

providing a control word packet (CWP); 
generating a first control word (CW) from the CWP; 
providing a second CW generation input; and 

producing a second CW based, at least in part, on both of the 
10 following: the first CW and the second CW generation input. 

2. The method according to claim 1 and wherein each control word 
controls access to a plurality of objects. 

15 3. The method according to claim 1 or claim 2 and also comprising: 

utilizing the first CW to control access to a first object; and 
utilizing the second CW to control access to a second object. 

4. The method according to any of claims 1-3 and also comprising: 
20 providing a third CW generation input; and 

producing a third CW based, at least in part, on both of the following: 
the second CW and the third CW generation input. 

5. The method according to claim 4 and wherein the third CW 
25 generation input comprises a user input. 

6. The method according to claim 4 or claim 5 and wherein the third CW 
generation input comprises a user characteristic input associated with a user. 

30 7. The method according to claim 6 and wherein the user characteristic 

input comprises at least one of the following: 
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an indication of a geographic region associated with the user; 
an indication of urban / rural dwelling associated with the user; 
an indication of a preference associated with the user; 
an indication of an age category associated with the user; 
5 an indication of an age associated with the user; 

an indication of a gender associated with the user; and 
an indication of an ethnic identity associated with the user. 

8. The method according to any of claims 3-7 and also comprising: 

1 0 receiving a data stream, 

wherein the first object and the second object are comprised in the 

data stream. 



9. The method according to claim 8 and wherein the data stream 
1 5 comprises a broadcast data stream. 

10. The method according to claim 8 or claim 9 and wherein the data 
stream comprises an MPEG data stream. 

20 11. The method according to claim 1 0 and wherein the MPEG data stream 

comprises an MPEG-4 data stream. 

12. The method according to any of the above claims and wherein each of 
the first object and the second object comprises a display object. 

25 

13. The method according to claim 12 and wherein the display object 
comprises a visual display object. 

14. The method according to claim 12 or claim 13 and wherein each of 
30 the first object and the second object comprises an accumulative display object. 
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15. The method according to claim 12 or claim 13 and wherein each of 
the first object and the second object comprises an exclusive display object. 

16. A method for generating a second control word from a first control 
5 word, the first control word controlling access to a first object and the second 

control word controlling access to a second object, the method comprising: 
providing a first control word (CW); 
providing a second CW generation input; and 

producing a second CW based, at least in part, on both of the 
10 following: the first CW and the second CW generation input. 

17. The method according to claim 16 and wherein each control word 
controls access to a plurality of objects. 

15 18. The method according to claim 16 or claim 17 and wherein the second 

CW generation input comprises a user input. 

19. The method according to any of claims 16 - 18 and wherein the 
second CW generation input comprises a user characteristic input associated with a 

20 user. 

20. The method according to claim 19 and wherein the user characteristic 
input comprises at least one of the following: 

an indication of a geographic region associated with the user; 
25 an indication of urban / rural dwelling associated with the user; 

an indication of a preference associated with the user; 

an indication of an age category associated with the user; 

an indication of an age associated with the user; 

an indication of a gender associated with the user; and 
30 an indication of an ethnic identity associated with the user. 
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21 . The method according to any of claims 18-20 and also comprising: 
receiving a data stream, 

wherein the first object and the second object are comprised in the 

data stream. 

5 

22. The method according to claim 21 and wherein the data stream 
comprises a broadcast data stream. 

23. The method according to claim 21 or claim 22 and wherein the data 
1 0 stream comprises an MPEG data stream. 

24. The method according to claim 23 and wherein the MPEG data stream 
comprises an MPEG-4 data stream. 

15 25. The method according to any of claims 16-24 and wherein each of 

the first object and the second object comprises a display object. 

26. The method according to claim 25 and wherein the display object 
comprises a visual display object. 

20 

27. The method according to claim 25 or claim 26 and wherein each of 
the first object and the second object comprises an accumulative display object. 

28. The method according to claim 25 or claim 26 and wherein each of 
25 the first object and the second object comprises an exclusive display object. 

29. A method for generating a plurality of control words, each control 
word controlling access to an object, the method comprising: 

providing a control word packet (CWP); 
30 generating a first control word (CW) from the CWP; 

providing a second CW generation input; 
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producing a second CW based, at least in part, on both of the 
following: the first CW and the second CW generation input; 

utilizing the first CW to control access to a first object; 

utilizing the second CW to control access to a second object; 
5 providing a third CW generation input; 

producing a third CW based, at least in part, on both of the following: 
the second CW and the third CW generation input; and 

utilizing the third CW to control access to a third object. 

10 30. The method according to claim 29 and wherein each control word 

controls access to a plurality of objects. 

31. A method for generating a plurality of control words, each control 
word controlling access to an object, the method comprising: 

15 providing a first control word (CW); 

providing a second CW generation input; 

producing a second CW based, at least in part, on both of the 
following: the first CW and the second CW generation input; 

utilizing the first CW to control access to a first object; 
20 utilizing the second CW to control access to a second object; 

providing a third CW generation input; 

producing a third CW based, at least in part, on both of the following: 
the second CW and the third CW generation input; and 

utilizing the third CW to control access to a third object. 

25 

32. The method according to claim 31 and wherein each control word 
controls access to a plurality of objects. 

33. The method according to claim 29 or claim 31 and wherein at least 
30 one of the second CW generation input and the third CW generation input comprises 

a user input. 
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34. The method according to any of claims 29 - 33 and also comprising: 

displaying at least the second object and the third object. 

5 35. The method according to claim 34 and wherein said displaying 

includes displaying the first object. 

36. The method according to any of claims 31-35 and also including: 
providing an event associated with the first object, the second object, 

1 0 and the third obj ect; and 

determining a price for the event. 

37. The method according to claim 36 and wherein the price is based, at 
least in part, on at least one of the second CW generation input and the third CW 

15 generation input. 

38. A method for generating a plurality of control words, each control 
word controlling access to an object, the plurality of control words comprising a first 
control word and at least one additional control word, the method comprising: 

20 providing a first control word (CW); 

setting a variable V equal to the first CW; 

for each additional CW to be generated, performing the following 

steps: 

providing an additional CW generation input; 
25 producing an additional CW based, at least in part, on both of the 

following: V; and the additional CW generation input; and 

setting the variable V equal to the additional control word. 

39. The method according to claim 38 and wherein each control word 
30 controls access to a plurality of objects. 
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40. The method according to claim 38 or claim 39 and wherein the 
providing a first CW comprises: 

providing a control word packet (CWP); 
generating the first CW from the CWP. 

5 

41. A method for generating a plurality of control words, each control 
word controlling access to an object, the plurality of control words comprising a first 
control word and at least one additional control word, the method comprising: 

providing a first control word (CW); 
10 for each additional CW to be generated, performing the following 

steps: 

providing an additional CW generation input; and 
producing an additional CW based, at least in part, on both of the 
following: the first CW; and the additional CW generation input. 

15 

42. The method according to claim 41 and wherein each control word 
controls access to a plurality of objects. 

43. The method according to claim 41 and wherein the providing a first 
20 CW comprises: 

providing a control word packet (CWP); and 
generating a first control word (CW) from the CWP. 

44. The method according to any of the above claims and wherein each 
25 object comprises a scrambled object, and each CW comprises a key for 

descrambling the scrambled object associated therewith. 

45. The method according to claim 44 and wherein each control word 
controls access to a plurality of objects. 

30 
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46. A method for providing a multiple-question game in a data broadcast 
environment, the method comprising: 

providing a first scrambled question; 

providing a first control word (CW) including descrambling 
5 information for descrambling the first question; 

receiving, from a user, a first answer to the first question; and 
producing a second CW based, at least in part, on both of the 

following: 

the first C W and the first answer, 
1 0 the second CW including descrambling information for descrambling 

a second question. 

47. The method according to claim 46 and wherein at least one of the first 
question and the second question comprises a plurality of questions. 

15 

48. Control word generating apparatus for generating a plurality of 
control words, each control word controlling access to an object, the control word 
generating apparatus comprising: 

a control word generator for generating a first control word (CW) 
20 from a control word packet (CWP); and 

a control word processor for producing a second CW based, at least in 
part, on both of the following: the first CW and a second CW generation input. 



49. The apparatus according to claim 48 and also comprising a security 
25 subsystem, and 

wherein the security subsystem comprises at least one of the 
following: the control word generator; and the control word processor. 

50. The apparatus according to claim 49 and wherein the security 
30 subsystem comprises a removable security element, and 
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the removable security element comprises at least one of the 
following: the control word generator; and the control word processor. 

51. Control word generating apparatus for generating a second control 
5 word from a first control word, the first control word controlling access to a first 

object and the second control word controlling access to a second object, the control 
word generating apparatus comprising: 

a control word processor for producing a second CW based, at least in 
part, on both of the following: a first CW and a second CW generation input. 

10 

52. Control word generating apparatus for generating a plurality of 
control words, each control word controlling access to an object, the control word 
generating apparatus comprising: 

a control word generator for generating a first control word (CW) 
1 5 from a control word packet (CWP); 

a control word processor for producing a second CW based, at least in 
part, on both of the following: the first CW and a second CW generation input; and 

an object access controller for utilizing the first CW to control access 
to a first object and the second CW to control access to a second object, 
20 wherein the control word processor is operative to produce a third CW 

based, at least in part, on both of the following: the second CW and a third CW 
generation input, and 

the object access controller is operative to utilize the third CW to 
control access to a third object. 

25 

53. The apparatus according to claim 52 and also comprising a security 
subsystem, and 

wherein the security subsystem comprises at least one of the 
following: the control word generator; the control word processor; and the object 
30 access controller. 
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54. The apparatus according to claim 53 and wherein the security 
subsystem comprises a removable security element, and 

the removable security element comprises at least one of the 
following: the control word generator; the control word processor; and the object 
5 access controller. 

55. Control word generating apparatus for generating a plurality of 
control words, each control word controlling access to an object, the control word 
generating apparatus comprising: 

10 a control word processor for producing a second CW based, at least in 

part, on both of the following: a first CW and a second CW generation input; and 

an object access controller for utilizing the first CW to control access 
to a first object and the second CW to control access to a second object, 

wherein the control word processor is operative to produce a third CW 
15 based, at least in part, on both of the following: the second CW and a third CW 
generation input, and 

the object access controller is operative to utilize the third CW to 
control access to a third object. 

20 56. The apparatus according to claim 55 and also comprising a security 

subsystem, and 

wherein the security subsystem comprises at least one of the 
following: the control word processor; and the object access controller. 

25 57. The apparatus according to claim 56 and wherein the security 

subsystem comprises a removable security element, and 

the removable security element comprises at least one of the 
following: the control word processor; and the object access controller. 



30 



58. Control word generating apparatus for generating a plurality of 

control words, each control word controlling access to an object, the plurality of 
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control words comprising a first control word and at least one additional control 
word, the control word generating apparatus comprising: 

a control word processor receiving a first control word (CW) as input 
and operative to: 
5 set a variable V equal to the first CW; 

for each additional CW to be generated: 
receive an additional CW generation input; 

produce an additional CW based, at least in part, on both of the 
following: V; and the additional CW generation input; and 
10 set the variable V equal to the additional control word. 

59. Control word generating apparatus for generating a plurality of 
control words, each control word controlling access to an object, the plurality of 
control words comprising a first control word and at least one additional control 

15 word, the control word generating apparatus comprising: 

a control word processor receiving the first control word (CW) and 
operative, for each additional CW to be generated, to: 

receive an additional CW generation input; and 
produce an additional CW based, at least in part, on both of the 
20 following: the first CW; and the additional CW generation input. 

60. The apparatus according to any of claims 51, 58 or 59 and also 
comprising a security subsystem, and 

wherein the security subsystem comprises the control word processor. 

25 

61. The apparatus according to claim 60 and wherein the security 
subsystem comprises a removable security element, and 

the removable security element comprises the control word processor. 

30 62. Game apparatus for providing a multiple-question game in a data 

broadcast environment, the apparatus comprising: 
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a scrambled question descrambler receiving a first scrambled question 
and a first control word (CW) including descrambling information for descrambling 
the first question and operative to descramble the first question; and 

a control word processor receiving, from a user ? a first answer to the 
first question and operative to produce a second CW based, at least in part, on both 
of the following: 

the first CW and the first answer, 
the second CW including descrambling information for descrambling 
a second question. 

63. The apparatus according to claim 62 and also comprising a security 

subsystem, and 

wherein the security subsystem comprises at least one of the 
following: the scrambled question descrambler; and the control word processor. 



46 



WO 01/91466 



PCT7IL01/00434 



64. The apparatus according to claim 63 and wherein the security 
subsystem comprises a removable security element, and 

the removable security element comprises at least one of the 
5 following: the scrambled question descrambler; and the control word processor. 

65. The apparatus according to any of claims 50, 54, 57, 61, or 64 and wherein 
the removable security element comprises a smart card. 
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FIG. 1D 
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FIG. 3F 
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FIG. 4B 
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FIG. 5 



PROVIDE A CONTROL WORD PACKET (CWP) 



GENERATE A FIRST CONTROL WORD (CW) 
FROM THE CWP 

I 

PROVIDE A SECOND CW GENERATION INPUT 



PRODUCE A SECOND CW BASED, AT LEAST IN 
PART, ON BOTH THE FIRST CW AND THE 
SECOND CW GENERATION INPUT 



FIG. 6 



PROVIDE A FIRST CONTROL WORD (CW) 



PROVIDE A SECOND CW GENERATION INPUT 



PRODUCE A SECOND CW BASED, AT LEAST IN 
PART, ON BOTH THE FIRST CW AND THE 
SECOND CW GENERATION INPUT 
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FIG. 7 



PROVIDE A CONTROL WORD PACKET (CWP) 



GENERATE A FIRST CONTROL WORD (CW) 
FROM THE CWP 







PROVIDE A SECOND CW GENERATION INPUT 






PRODUCE A SECOND CW BASED, AT LEAST IN 
PART, ON THE FIRST CW AND THE SECOND 
CW GENERATION INPUT 






UTILIZE THE FIRST CW TO CONTROL ACCESS 
TO A FIRST OBJECT 






UTILIZE THE SECOND CW TO CONTROL 
ACCESS TO A SECOND OBJECT 






PROVIDE A THIRD CW GENERATION INPUT 






PRODUCE A THIRD CW BASED, AT LEAST IN 
PART, ON BOTH THE SECOND CW AND THE 
THIRD CW GENERATION INPUT 






UTILIZE THE THIRD CW TO CONTROL ACCESS 
TO A THIRD OBJECT 
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FIG. 8 



PROVIDE A FIRST CONTROL WORD (CW) 



PROVIDE A SECOND CW GENERATION INPUT 



PRODUCE A SECOND CW BASED, AT LEAST IN 
PART, ON THE FIRST CW AND THE SECOND 
CW GENERATION INPUT 



UTILIZE THE FIRST CW TO CONTROL ACCESS 
TO A FIRST OBJECT 



UTILIZE THE SECOND CW TO CONTROL 
ACCESS TO A SECOND OBJECT 

1 

PROVIDE A THIRD CW GENERATION INPUT 



I 

PRODUCING A THIRD CW BASED, AT LEAST 
IN PART, ON BOTH THE SECOND CW AND 
THE THIRD CW GENERATION INPUT 



UTILIZE THE THIRD CW TO CONTROL ACCESS 
TO A THIRD OBJECT 
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FIG. 9 



PROVIDE A FIRST CONTROL WORD (CW) 



SET A VARIABLE V EQUAL TO THE FIRST CW 



FOR EACH ADDITIONAL CW TO BE 
GENERATED, PERFORM THE FOLLOWING 
STEPS: 





PROVIDE AN ADDITIONAL CW GENERATION 
INPUT 




t 




PRODUCE AN ADDITIONAL CW BASED, AT 
LEAST IN PART, ON BOTH THE V AND THE 
ADDITIONAL CW GENERATION INPUT 




♦ 




SET THE VARIABLE V EQUAL TO THE 
ADDITIONAL CONTROL WORD 
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FIG. 10 



PROVIDE A FIRST CONTROL WORD (CW) 



FOR EACH ADDITIONAL CW TO BE 
GENERATED, PERFORMING THE FOLLOWING 
STEPS: 



PROVIDE AN ADDITIONAL CW GENERATION 
INPUT 



PRODUCE AN ADDITIONAL CW BASED, AT 
LEAST IN PART, ON BOTH THE FIRST CW 
AND THE ADDITIONAL CW GENERATION INPUT 



FIG. 1 1 



PROVIDE A FIRST SCRAMBLED QUESTION 



PROVIDE A FIRST CONTROL WORD (CW) 
INCLUDING DESCRAMBLING INFORMATION FOR 
DESCRAMBLING THE FIRST QUESTION 

t 

RECEIVE, FROM A USER, A FIRST ANSWER TO 
THE FIRST QU ESTION 

t 

PRODUCE A SECOND CW BASED, AT LEAST IN 
PART, ON BOTH 
THE FIRST CW AND THE FIRST ANSWER, 
THE SECOND CW INCLUDING DESCRAMBLING 
INFORMATION FOR DESCRAMBLING A SECOND 
QUESTION 



